Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/Rq1CrpWVvHx81iF0yv2CmyxOGiM.roa
File: Rq1CrpWVvHx81iF0yv2CmyxOGiM.roa (raw, json)
Hash identifier: a+DkDp1TptVBWwEy/OfBk+uhB64mMxCuleZtGIvfNQY=
Subject key identifier: 46:AD:42:AE:95:95:BC:7C:7C:D6:21:74:CA:FD:82:9B:2C:4E:1A:23
Certificate issuer: /CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Certificate serial: 0194221FF248BE9A6587BA4D5938C17D087A
Authority key identifier: 13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/Rq1CrpWVvHx81iF0yv2CmyxOGiM.roa
Signing time: Wed 01 Jan 2025 13:48:26 +0000
ROA not before: Wed 01 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 138.131.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f2:48:be:9a:65:87:ba:4d:59:38:c1:7d:08:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46ad42ae9595bc7c7cd62174cafd829b2c4e1a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:76:09:f3:a2:98:c6:7e:df:54:c1:68:89:
c6:99:6c:65:6c:d0:f8:40:8e:b1:a8:de:64:1d:44:
fa:d3:b4:e8:54:29:dc:53:c7:7b:c5:5a:c5:43:42:
41:9a:ce:a3:7c:fa:b9:a4:f1:ab:de:b6:24:71:8b:
ca:10:d3:3d:e6:a1:25:3c:4c:b4:c3:ce:5d:b0:84:
a2:d3:d7:cb:db:5f:28:00:e0:b7:a6:f5:55:a1:9c:
e7:e7:1d:6c:f8:b9:d8:70:d3:2d:dd:35:ce:4b:64:
03:24:30:48:26:80:e8:70:1f:cb:a6:3a:0d:c5:a8:
80:e0:b0:46:87:ed:ad:2d:2b:18:0b:38:0d:c2:0d:
39:5d:97:19:0e:81:22:9d:ef:d7:01:36:d7:c6:c8:
6e:e3:ec:21:d5:6f:ce:93:20:47:06:eb:d6:e4:1c:
c1:24:ab:1f:b7:1e:a6:c3:1d:1c:83:57:a0:df:74:
7e:e9:32:42:d5:1f:f8:7d:17:50:b6:0f:1e:68:b6:
6b:35:4d:9b:ad:3e:00:9e:e8:a2:be:df:29:62:15:
c1:d5:1f:70:5d:bd:8f:fe:2b:48:ad:d6:1a:7d:3c:
96:e9:1d:b9:ca:10:40:6c:12:1a:43:12:3d:12:67:
68:a2:2b:34:52:fe:10:63:9c:19:cf:3c:cc:72:7c:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AD:42:AE:95:95:BC:7C:7C:D6:21:74:CA:FD:82:9B:2C:4E:1A:23
X509v3 Authority Key Identifier:
keyid:13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/Rq1CrpWVvHx81iF0yv2CmyxOGiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d0:32:0d:f3:01:d5:1b:e3:9a:d9:d0:4c:2c:a0:cb:24:1d:a9:
f9:6c:b0:1b:58:60:cd:95:61:79:40:3b:83:e1:be:c2:88:9f:
b5:65:21:b5:36:0a:4b:8c:18:46:c9:01:99:76:38:5e:0f:7c:
e0:49:9e:31:80:55:03:4a:48:3e:b8:35:45:92:24:9f:dc:52:
7f:b6:50:32:35:7c:9d:27:a6:92:4e:77:66:87:2b:db:fc:1b:
c4:07:34:98:a4:56:56:56:29:37:ba:bb:e0:83:b8:54:44:99:
17:87:d6:49:a2:20:5c:7b:87:de:e7:0a:1a:64:4b:b6:e7:e4:
92:fe:ea:71:97:37:c4:54:e1:29:d6:d5:35:ce:93:e9:c2:24:
49:cc:e8:92:43:dc:7c:00:8a:91:e4:99:57:d4:f3:b1:fe:a7:
15:21:03:d5:ae:80:1e:84:ab:ad:4b:02:52:d8:0b:3d:62:6e:
60:93:27:bd:e0:4c:5d:1d:19:b6:44:51:e0:f5:5b:09:09:66:
8b:1f:41:b8:49:75:8d:3c:14:fe:cc:50:5d:5d:fe:05:e2:04:
38:63:61:11:a5:35:5e:f9:35:73:e9:b9:1e:fa:57:2e:56:75:
42:f2:1f:39:1e:6e:18:5c:0a:e4:da:ef:b1:85:03:ff:42:b7:
30:7f:fa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:26:47 2025 by rpki-client